This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer File: JWBlthZq75b8_zoupW_f_TkPMWY.cer (raw, json) Hash identifier: AMJv+UWgal4AuIekfbjf+at00e9P8LjAaPJBJYdaD5k= Subject key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F80A19F8508654DD2F7F534B0150AD7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213451 AS: 215638 IP: 2a14:f700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:a1:9f:85:08:65:4d:d2:f7:f5:34:b0:15:0a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=256065b6166aef96fcff3a2ea56fdffd390f3166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9d:75:10:6f:75:c1:4f:51:b8:86:c4:af:1b: 82:c6:e4:e5:4c:dd:0e:c3:49:8c:dd:bf:84:43:f0: a0:d1:db:b7:b0:19:c1:29:f0:47:b9:5c:5c:d9:81: d1:bc:ce:4a:32:bf:65:23:fe:bc:6c:2b:b0:e0:3f: 4e:d0:72:0b:9e:0b:be:cf:25:c2:85:2d:41:29:c3: 46:bf:99:70:70:b0:cd:66:18:a4:81:cb:2b:4f:5c: ab:25:a0:bb:13:22:04:0d:8c:82:25:aa:ba:5a:7b: aa:e9:b4:a8:51:47:49:12:59:61:ff:4b:38:be:f6: 0f:59:a9:c4:14:e0:7d:29:f6:05:0e:a6:ef:0d:f0: 41:10:ae:92:50:f4:dc:7c:67:29:7f:7b:00:40:e2: 76:55:de:c4:13:fe:65:92:14:cb:94:58:70:f8:2b: e0:14:6a:65:7d:8b:12:e1:83:cc:c1:5f:c9:49:58: 2e:84:13:dd:0a:66:7b:b1:3c:17:d0:b8:9d:af:9b: 5c:b1:12:26:84:9e:2d:fc:5c:5f:81:63:88:ab:42: ab:92:e9:09:b3:b9:a6:1d:d8:b2:94:4b:66:1b:fb: e6:4a:4a:94:36:2a:5c:45:3b:f5:66:c3:0b:42:e1: 5f:a9:f1:2e:ec:b2:b5:b2:3b:f7:1f:26:30:de:3d: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:f700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213451 215638 Signature Algorithm: sha256WithRSAEncryption 1d:d2:a8:80:29:e2:e0:ee:fd:2e:c0:99:0e:03:83:4f:16:61: d9:d5:11:83:79:64:35:63:aa:32:39:24:f1:b3:60:aa:ef:57: 95:89:a6:d5:d5:67:49:df:d1:1d:84:0d:67:f9:06:16:7a:b2: 21:cd:dc:8f:f5:8d:7d:7e:a1:31:4f:e7:6a:da:18:25:2f:03: ff:05:aa:58:18:e7:b2:34:64:b7:4a:9b:6f:9a:d8:e6:dd:e5: b0:58:1c:6f:79:6b:1a:a2:15:ad:18:a5:7e:15:de:ed:dc:15: 86:35:b5:c5:58:ee:ec:0a:d3:60:44:33:59:f3:93:bf:2f:9b: 1f:05:6c:06:f6:27:2a:56:23:91:ac:42:0b:24:96:28:78:fe: a5:cb:aa:57:2c:af:62:87:6b:c0:59:fa:8b:ad:aa:0a:4f:d4: df:2c:f6:70:4b:1b:cf:a1:0f:fe:4d:d4:15:7e:3f:29:80:79: dd:5b:dd:11:f4:68:d9:ab:ba:15:98:ab:9b:54:bc:82:ee:ce: db:fa:99:81:1f:3a:8b:df:2c:51:16:3c:e3:cf:3a:c4:13:b1: d2:09:2c:f3:b8:41:92:0e:a3:22:d4:f9:b0:68:09:77:72:cc: 72:fd:6e:39:b8:57:b1:14:55:08:3f:f8:00:10:f7:e7:b4:18: 93:37:4b:66 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/gKGfhQhlTdL39TSwFQrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTYwNjViNjE2NmFlZjk2ZmNmZjNhMmVhNTZmZGZmZDM5MGYzMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp11EG91wU9RuIbErxuCxuTlTN0O w0mM3b+EQ/Cg0du3sBnBKfBHuVxc2YHRvM5KMr9lI/68bCuw4D9O0HILngu+zyXC hS1BKcNGv5lwcLDNZhikgcsrT1yrJaC7EyIEDYyCJaq6Wnuq6bSoUUdJEllh/0s4 vvYPWanEFOB9KfYFDqbvDfBBEK6SUPTcfGcpf3sAQOJ2Vd7EE/5lkhTLlFhw+Cvg FGplfYsS4YPMwV/JSVguhBPdCmZ7sTwX0Lidr5tcsRImhJ4t/FxfgWOIq0KrkukJ s7mmHdiylEtmG/vmSkqUNipcRTv1ZsMLQuFfqfEu7LK1sjv3HyYw3j2h7wIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFCVgZbYWau+W/P86LqVv3/05DzFmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzhjZGM0 OC0yODIyLTQ1OTktYmI2OS04YzQ1NmFmNmI2YmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOGNkYzQ4 LTI4MjItNDU5OS1iYjY5LThjNDU2YWY2YjZiYi8xL0pXQmx0aFpxNzViOF96b3Vw V19mX1RrUE1XWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhT3ADAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMDQcsCAwNKVjANBgkqhkiG9w0BAQsFAAOCAQEAHdKogCni4O79LsCZDgODTxZh 2dURg3lkNWOqMjkk8bNgqu9XlYmm1dVnSd/RHYQNZ/kGFnqyIc3cj/WNfX6hMU/n atoYJS8D/wWqWBjnsjRkt0qbb5rY5t3lsFgcb3lrGqIVrRilfhXe7dwVhjW1xVju 7ArTYEQzWfOTvy+bHwVsBvYnKlYjkaxCCySWKHj+pcuqVyyvYodrwFn6i62qCk/U 3yz2cEsbz6EP/k3UFX4/KYB53VvdEfRo2au6FZirm1S8gu7O2/qZgR86i98sURY8 4886xBOx0gks87hBkg6jItT5sGgJd3LMcv1uObhXsRRVCD/4ABD357QYkzdLZg== -----END CERTIFICATE-----Generated at Mon Jan 19 18:29:15 2026 by rpki-client